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Description 

NETWOR K, IN PARTICULAR PA PROFffiUS NETWORK, PROVIDED 
WITH REDUNDANCY PROPERTIES, A BRANCHING UNIT FOR A 

USER DEVICE IN SAffi A NETWORK WITH REDUNDANCY 
PROPERTIES. REDUNDANCY MANAGER FOR SAH>_AJVETWORK 
WITH REDUNDANCY PROPERTIES AND METHOD FOR OPERATING 
SA» ^NETWORK WITH REDUNDANCY PROPERTIES 

CROSS REFERENCE TO RELATED APPLICATIONS 
[0001] This application claims priority to the German application No. 103561 18.8, filed 
November 27, 2003, to the German application No. 10 2004 055 53.0, filed November 15, 
2004 and to the International Application No. PCT/EP2004/0 13455, filed November 26, 2004 
which are incorporated by reference herein in their entirety. 

FIELD OF INVENTION 

[0002] The invention relates to a network, In particular a PA PROFIBUS network, with 
redundant properties in accordance with the preamble of claim 18 , a branching element for a 
user device in said network in accordance with the preamble of claim -8-, a redundancy 
manager for said network in accordance with the preamble of claim 13 and a method for 
operating said networ k in accordance with the preamble of claim -43-. 

BACKGROUND OF INVENTION 

[0003] In automation systems for manufacturing or process technology with "classic" wiring 
of field devices, for example measurement converters and /or control elements, in which the 
field devices are connected in each case via a 4 -wire master cable and subdistributors by a 
separate pair of wires to a programmable logic controller, the failure of one of the field 
devices or of a transmission link to this field device has no effect on the function of a field 
device since the individual field devices are operated physically separated from one another. 

SUMMARY OF INVENTION 

[0004] With field devices which communicate via a field bus with the programmable logic 
controller, the bus cable forms a common component for all field devices and if it fails it 
affects all field devices. In addition errors in the field devices, for example a short circuit of 
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the transmission line or sending out of noise signals on the transmission line, can ad versely 
affect communication of the other field devices connected the bus cable. Because of the 
possibly reduced system availability field buses are not used in particularly critical 
applications or must be configured to provide redundancy. 

[0005] In principal a distinction must be made between two different redundancy concepts in 
automation technology systems. On the one hand system redundancy improves the availability 
through a redundant, that is largely duplicated structure of the complete system, consisting of 
field devices, a bus system and programmable logic controllers. Coordination, i.e. which of 
the components must actively be operated at any given time and which are in standby mode is 
undertaken at programmable logic controller level and the controllers must be configured for 
this purpose. All other components are standard components. The other concept is media 
redundancy in which with the transmission media only the part of the communication system 
is arranged redundantly of which the failure would have particularly serious effects on the 
system availability. For example a high-availability field bus system is known from EP 0 287 
992 B2 which features two bus lines over which identical messages are transmitted serially in 
each case. With a detector logic which is located in the connected users, test characters are 
evaluated for testing the function of the busses. If there are errors in the test character there is 
a switchover to receive by the other error-free bus. The redundant configuration of the 
transmission medium thus increases the availability of the bus system. 

[0006] An Ethernet network with redundancy properties is known from EP 1 062 787 Bl. The 
Ethernet network has a linear topology. The line ends are connected to a redundancy manager. 
The redundancy manager uses test telegrams to check the state of the network. If there is an 
interruption of the network the redundancy manager connects the line ends and thereby re - 
establishes a line structure and the operability of the network. The disadvantage here is that 
the test telegrams which are injected by the redundancy manager into the two ends of the line 
represent an additional network load for the network and thus reduce the transmission 
capacity of the network. This monitoring and switchover principal is also not simply 
transferable to bus systems in which, in addition to transmission of the data, the energy 
required for operating the user devices connected to the bus is transmitted over the bus. 

[0007] The An object of the invention is to create a network, in particular a P ROFIBUS PA 
network with redundant properties and the option of remote power feeding of user devices, a 
branching unit for a user device in said network, a redundancy manager for said network and a 
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method for operating said net work, through which an increase in the availability of the 
network can be achieved with simple means. 

[0008] In accordance with the invention the This object is achieved by the claims the network 
specified in claim 1, the branching unit specified in claim 8, the redundancy manager 
specified in claim 13 or the method specified in claim 17 . Advantageous developments of the 
network, the branching unit and the redundancy manager are to be found in the dependent 
claims subclaims . 

[0009] The advantage of the invention is that the redundancy manager enables an error in the 
network to be detected and rectified comparatively rapidly. With an interruption or a short 
circuit in a cable segment no feed voltage is directed to this segment by the connected 
branching unit of a user device which in the positive case should be feeding over the segment 
the energy required for operation of the devices located beyond the segment, no feed voltage 
is routed on this segment or the forwarding of a feed voltage on this segment is interrupted. 
This means that the feed voltage no longer reaches the other end of the line which is 
connected to the redundancy manager. This is detected by the redundancy manager, which a 
short time after establishing the error state also feeds the required operating energy into the 
other end of the line. The defective cable segment is isolated by the two delimiting branching 
units and the network continues to be operable despite the error without any long interruption 
to operation. The communication in the network is also maintained in the event of an error 
without a higher-ranking network, especially a control system to which the network is 
connected, being disturbed or called on in any other way. 

[00010] By contrast with the method known from EP 1 062 787 Bl mentioned a above, 
in which the status of the network is checked with a test telegrams, the invention has the 
advantage that errors are able to be detected as soon as they have occurred and not just at the 
point at which test telegrams have been sent through the network. The reaction time of the 
known method of can be improved by increasing the frequency of the test telegrams, i.e. 
reducing the cycle time of the test telegram injection. However this would bring with it the 
disadvantage that the test telegrams would represent a significant additional network load. By 
contrast the invention advantageously completely avoids any additional load on the network 
with test telegrams. 
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[00011] A further advantage can be seen in the fact that the redundancy manager and 
the branching units of the present invention do not have to participate in data traffic in the 
sense of data processing. Therefore the implementation effort is lower, the power requirement 
is reduced and the availability is increased because of the lower device complexity. The 
expansion of an existing network by redundancy properties is more simple to implement. 

[00012] Because the redundancy manager and the branching units are each provided 
with a termination element (terminating resistor) which can be connected in the case in which 
they are located at the end of the line in the relevant network topology, the signal transmission 
properties of the transmission link can be flexibly adapted to the prevailing topology after 
topology changes and thus the network is also suitable for higher baud rates. 

[00013] Advantageously and especially simple implementation of a branching unit is 
achieved if this is provided with at least two switches and with a control unit, with the control 
unit being able to set the two switches so that the user device connected by the relevant 
branching unit to the network can be connected through to the one, to the other or to both 
network connections of the branching unit to obtain operating energy and for data 
transmission. 

[00014] Advantageously it is made especially simple to test a cable connected to a 
branching unit for a short circuit or interruption if the branching unit features a resistor 
network in which the switches are arranged and when the switches can be controlled by the 
control unit such that current and/or voltage of the cable connected to the one or to the other 
network connection of the branching unit can be checked. 

[00015] Since the switching times of the switches are not infinitely short the operating 
energy injected at the line end or line ends can be made available to the user devices in the 
event of an error in an uninterruptible manner. To resolve this problem at least one of the 
branching units, but especially each of them, features an energy store which at least in the 
fault-free state can be charged by the feed voltage; The branching unit is embodied to record 
the voltage present at the connected user device and in the event of a voltage deficit to connect 
the energy store to the user device. 

[00016] As already mentioned, one advantage of the invention is that the redundancy 
manager and the branching unit do not have to take part in data traffic. An error, such as an 
interruption or a short circuit in a cable segment, can thus be displayed easily by the two 
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branching units on both sides of the error location locally, for example using a light -emitting 
diode, however the redundancy manager can only detect the error status but not the error 
location. To enable the error location to be determined as well the redundancy manager 
advantageously features means which record the timing of the voltage and/or the current at the 
one end of the line during the forwarding of the feed voltage by the individual branching unit 
and from this determines the number of branching units up to the error location. The 
redundancy manager can display this information about the error location and/or notify a 
higher-ranking control system about it so that it can be established centrally where the error 
has occurred and is to be repaired. The redundancy manager thus preferably also has a 
communication interface for connection and exchange of data with a higher -ranking network 
in which the control system can be located. 

[00017] By recording changes in the voltage and/or the current at at least one of the two 
line ends the redundancy manager can determine state transitions of the network and thus 
establish when an error has been repaired. 

[00018] To extend the redundancy of the inventive network beyond the redundancy 
manager through to a higher-ranking network, for example one containing a control system, 
the redundancy manager is preferably able to be connected via at least two segment c ouplers 
to at least two communication channels of the higher -ranking redundant network and is 
further embodied to monitor the functionality of the segment couplers and depending on the 
lists, to select one of the segment couplers for connection with the ne twork. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[00019] The invention, along with its embodiments and advantages, is explained in 
greater detail below with reference to the drawings in which an exemplary embodiment of the 
invention is shown. The figures show: 

[00020] Figure 1 a block diagram of a part of a automation technology system, 
[00021] Figure 2 a block diagram of a redundancy manager, 
[00022] Figure 3 a block diagram of a part of a automation technology system in 

an alternate embodiment to Figure 1, 
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[00023] Figure 4 a block diagram of a branching unit, 

[00024] Figure 5 a state table of a control unit of a branching unit, 

[00025] Figure 6 a state diagram corresponding to the state table shown 



in Figure 5 and 



[00026] Figure 7 a basic circuit diagram of an expanded branching unit. 



DETAILED DESCRIPTION OF INVENTION 



[00027] Figure 1 shows a part of an automation technology system. A control system 1 
is connected to a bus system 2 in accordance with the PROFIBUS DP Specification. The bus 
system 2 can be configured as a simple system, or to provide redundancy as shown here. At 
each of the two communication channels 3, 4 of the bus system 2, as well as other devices not 
shown here, for example automation units, a link 5 or 6 is connected in each case. The link 5 
is linked to a segment coupler 7 which is connected via a drop cable 8 to a port Al of a 
redundancy manager RM. The other link 6 is linked to a further segment coupler 9 which is 
connected via a further drop cable 10 to a port A2 of the redundancy manager RM. A network 
1 1 which complies with the PROFIBUS PA specification and has a linear topology is 
connected to two further ports Bl and B2 of the redundancy manager RM. The one line end 
El of the network 1 1 is formed by the end of the trunk cable H3 connected to the port Bl, 
which at its other end is connected to a network connection of a branching unit T2. The 
branching unit T2 and further branching units Tl, T3, T4 serve to connect field devices Fl, F2, 
F3, F4 as user devices to the network 1 1. In this case the field devices F1...F4 are each 
connected via drop cables SKI, SK2, SK3 or SK4 to the relevant branching units Tl ...T4. 

[00028] So that a continuous line as a structure of the network 1 1 is achieved the other 
network connection of the branching unit T2 is linked by a trunk cable HI to a network 
connection of the branching unit Tl, the other network connection of the branching unit Tl by 
a trunk cable H2 to a network connection of the branching unit and T3 and the other network 
connection of the branching unit T3 by a trunk cable H4 to the network connection of the 
branching unit T4. The other network connection of the branching unit T4 is connected by a 
trunk cable H5 to the port B2 of the redundancy manager RM. The end of the trunk cable H5 
located at the port B2 represents in the error -free case a second line end E2 of the linear 
network 1 1 . 
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[00029] * Via the trunk cables H3, HI, H2 and H4, as well as the data, energy to operate 
the field devices F1...F4 is also transmitted. To this end each of the two segment couplers 7, 9 
contains a direct current source and feeds direct current into both wires of the associated stub 
line 8 or 10. The redundancy manager RM selects one of the two redundant segment couplers 
7, 9, in this case for example the segment coupler 7, and when the system starts up switches 
the relevant port Al directly to port Bl so that the feed voltage made available by this 
segment coupler 7 is also present at port Bl. In the error-free case the branching units T1...T4 
forward the feed voltage arriving in each case on the one network connection to the other 
network connection. This means that the feed voltage is successively switch through to the 
line end E2, which is located at port B2 of the redundancy manager RM. The redundancy 
manager RM monitors the incoming voltage at its port B2. If, after a delay depending on the 
network configuration, this does not comply with a predetermined required value, it is clear 
that there is an error present in network 1 1 . This can for example be a short circuit or an 
interruption in one of the trunk cables HI ...H5. 

[00030] An interruption of the trunk cable H2 between the branching units Tl and T3 
will now be considered by way of an example, as is indicated in Figure 1 by a dashed 
interruption line 12. This type of interruption is detected by the branching unit Tl which 
subsequently does not forward the feed voltage so that the branching units T3 and T4 as well 
as the port B2 of the redundancy manager RM are no longer reached. The redundancy 
manager RM detects the absence of the feed voltage at port B2 and subsequently applie s a 
voltage to supply the field devices F3 and F4 which lie beyond the error location, i.e. in the 
example described, beyond the interruption 12, to its port B2. It does this by connecting the 
ports B 1 and B2 and thereby the line ends El and E2 to each oth er. The supply voltage is 
switched through from port B2 via the branching unit T4 to the branching unit T3 which lies 
immediately beyond the error location, detects the error 12 and thus does not forward the 
supply voltage. With the establishment of the supply voltage for all field devices F1..JF4 the 
data transmission in the network 1 1 and thereby the further operation of the network 1 1 is 
safeguarded despite the error 12. 

[00031] The method of operation described on start-up of the network 1 1 can also 
contain further steps in which data will be exchanged between the branching units and the 
redundancy manager and/or in the reverse direction with a method not described in any 
greater detail here. Such an exchange of data enables the reliability of the network 1 1 to be 
increased and its start up and error detection also simplified. 
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[00032] The redundancy manager RM shown in the example in Figure 2 contains a first 
control unit RCMA assigned to the ports Al and A2, a second control unit RCMB assigned to 
the ports Bl and B2 and higher-ranking controller RMC. The ports Al, A2, Bl and B2 are 
interconnected via a switching network with switched RMS1, RMS2 and RMS3, with switch 
RMS1 which can be controlled by the first control unit RMC A being used for selection of the 
two ports Al , A2 and the switches RMS2 and RMS3 which can be controlled by the second 
control unit RMCB connecting the relevant selected port Al or A2 either with one of the two 
ports B 1 and B2, with both ports B 1 , B2 or with neither of the ports B 1 and B2. The ports B 1 
and B2 have termination elements BT1 , BT2 in the form of terminating resistors, which can 
be activated or deactivated. 

[00033] The first control unit RMCA monitors the currents and/or voltages at the ports 
Al and A2 and in this way can monitor the segment couplers 7 and 9 (cf. Figure 1) and in the 
event of an error initiate the switchover from the faulty segment couplers to the others. The 
second control unit RMCB monitors the currents and/or voltages at the ports Bl and B2 and 
thus, as already explained above, can detect whether an error is present in the network 1 1 and 
whether accordingly one of the two ports Bl and B2 is to be connected to the relevant selected 
port Al or A2. In addition, as will be explained later, the second control unit RMCB can 
detect whether the error has been rectified in the network 1 1 and accordingly actuate the 
switches RMS2 and RMS3. 

[00034] The higher-ranking control RMC is connected to the two control units RMCA 
and RMCB and has a communication interface RMI, in this case a PROFIBUS slave 
interface, for connection to the relevant selected port Al or A2. This enables the redundancy 
manager RM to communicate with the higher -ranking control system 1 in order for example 
to transmit status information so that suitable measures can be taken to rect ify the error, or to 
receive configuration commands. 

[00035] Like the redundancy manager RM The branching units Tl ...T4 also have 
connectible termination elements which are connected in if they are located at the end of a 
line in a linear topology to avoid signal reflections at the line end. In the error-free case the 
termination element BT2 is connected in the redundancy manager RM at the port B2 in the 
example explained on the basis of Figure 1; The termination element BT1 is separated from 
the corresponding port BL If an error occurs as has been explained in the example by the 
interruption 12 the redundancy manager RM separates the termination element BT2 from the 
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port B2 and the branching units Tl and T3 lying on either side of the error location activate 
their relevant termination element. This means that even if the line ends are shifted signal 
reflections are effectively suppressed. 

[00036] The termination of the cable with a terminating resistor at the two ends of the 
trunk cable is required for a number of reasons: 

[00037] The bus signal is defined as a current signal with +10 mA which creates via the 
terminating resistors with two parallel -switched 100 Ohm resistors which correspond to a 50 
Ohm resistance a defined voltage drop of +0.5 V. 

[00038] The maximum echo delay time in the cable of appr. 20 |is lies at 2 km in the 
order of magnitude of a signal half wave with approximately 16 p,s, so that strong reflections 
would lead to bit errors. The overlapping should have settled down after a maximum of 20% 
of the duration of a half wave, corresponding to a line length of less than 300 m. Accordingly 
the IEC standard only allows drop lines of up to max. 120 m in length, with inherently secure 
networks of up to max. 30 m in length. 

[00039] Figure 3 shows an embodiment of the automation system as per Figure 1 in 
which the redundancy manager RM is embodied in two parts. The first redundancy manager 
part RM1 features the ports Al and Bl with which it is connected to segment coupler 7 or to 
the line end El of the network 1 1 . The other redundancy manager part RM2 features the ports 
A2 and B2, with which it is connected to the segment coupler 9 or to the line end E2 of the 
network 1 1 . As is indicated by the dashed line, the redundancy manager RM1 and the 
associated segment coupler 7 including the direct current source contained in it and if nec. the 
link 5, can be grouped together in a first component 13 and the other redundancy manager 
RM2 with the segment coupler 9 and the associated direct current source and if nec. the link 6, 
can be grouped together in a second component 14. The exemplary embodiment shown here 
has the advantage that the network 1 1 does not have to be in the form of a ring because the 
ring is not closed at the line ends El and E2 but via the redundancy manager partsl3, 14, the 
segment couplers 7, 9, the links 5, 6 and the field bus system 2. 

[00040] The basic structure of a branching unit is described in greater detail below with 
reference to the example of the branching unit Tl in Figure 4. The branching unit Tl 
establishes the connection between the pairs of wires of the trunk cables HI and H2 and the 
drop cable SKI . The trunk cables HI and H2 are connected to the network connections NW1 

2003P17943WOUS Substitute Specification marked SOL.rtf 

9 



200317943 



or NW2 of the branching unit Tl . As well as the data, the energy to operate the field devices 
is also transmitted over two pairs of copper wires HI a and Hlb, H2a and H2b, as well as Sa 
and Sb of the cables HI, H2 or SKI. To this end, as already mentioned, the segment couplers 
7 and 9 (cf. Figures 1 and 3) each contain a direct current source, with the segm ent coupler 7 
selected by the redundancy manager RM injecting a direct current into the two wires of the 
transmission cable. The field devices F1...F4 each take a proportion of the direct current and 
overlay the direct current with an alternating current which contains the information to be 
transmitted. The branching unit Tl features a control unit ST, which with the aid of currents 
II, 12 and/or voltages Ul, U2, which are measured on the trunk cables HI and H2, monitors 
the state of the connected cables HI and H2 and also monitors the voltage U3 on the drop 
cable leading to the field device Fl. Furthermore the branching unit Tl contains a resistance 
element BT, four switches SO, SI, S2 and S3, a resistance network consisting of resistors R0, 
Rl and R2 for voltage measurement and an energy accumulator C in the form of a capacitor. 
The position of the switches SO.. .S3 is predetermined by the control unit ST depending on the 
recorded currents II and 12 and/or of the measured voltages Ul, U2 and U3. The terminating 
element BT which can be connected with the aid of the switch SO for the case in which the 
branching unit Tl is located at the end of a line, corresponds to a standard terminating resistor 
of the PROFIBUS PA bus system. The size of the resistors R0, Rl and R2 is selected so that 
the state of the connected cables HI and H2 can be determined in the optimum way. They are 
in this case preferably arranged to be of such high resistance that the current flowing over 
them is very small by comparison with the current which flows in normal operation over the 
cables HI and H2. In this case the line resistances of the cables HI and H2 are negligibly 
small. 

[00041] The functioning of the branching units Tl ... T4 is explained in greater detail 
below with reference to the state table shown in Figure 5 for the control unit ST of the 
branching unit Tl. For the sake of simplicity it is assumed that the three resistors R0, Rl and 
R2 have the same resistance value. Beginning from the left, the current state of the control 
unit ST, test criteria for a state transition relating to the voltage Ul and a power ratio K = 
U2/U1, the settings of the switches SO, SI and S2, the next state and remarks about the case 
concerned are entered in the columns of the table. The IDLE state specified in the table 
corresponds to the basic state which is assumed if the two trunk cables HI and H2 are not 
carrying any voltage; I.e. the checked voltages Ul and U2 are equal to zero or at least smaller 
than a comparison voltage U0, which is to be defined in a s uitable manner depending on at the 

2003P17943WOUS Substitute Specification marked SOL.rtf 

10 



200317943 



relevant feed voltage. The same applies to a comparison current 10 with which the currents 12 
and II can be compared. In this state the switches SI and S2 are in the "on" position, as is 
specified in the table in the columns in the relevant row of the IDLE state of belonging to the 
switches SI and S2. Since the IDLE state is retained the IDLE state is again specified in this 
case in the column "next state". In the column "K = U2/U1" examples of the voltage ratio 
between the voltages U2 and Ul are specified for which overshoots and undershoots are 
monitored by the control unit ST. Depending on the result of the comparison, a transition is 
made from a current state into a next state. For example the entry in the column "K = U2/U1" 
of the first row of the state TEST', means that there will be a transfer into the follow -up state 
TEST2 if the voltage ratio K lies between 1/10 and 2/5. The determination of the comparison 
values, here for example 1/10 and 2/5, with which the current voltage ratio K determined by 
the control unit ST is compared, depends on various peripheral conditions, especially the size 
of the resistors R0, Rl and R2 and is only specified here as an example. When a feed voltage 
US is switched on in the segment coupler 7 (Figures 1 and 3) this voltage is fed via the 
redundancy manager RM, the branching unit T2 and the trunk cable HI to the network 
connection NW1 of the branching unit Tl and Ul = US > U0 applies. The control unit ST 
thus switches from the IDLE state into the TEST1 state and measures the two voltages Ul and 
U2. If the trunk cable in the subsequent segment, here the trunk cable H2 is short -circuited, 
the voltage drop over the resistor R0 will be very much greater than the voltage U2 
measurable at the network connection NW2 or at the cable H2; i.e. K = U2/U1 < 1/10. This 
corresponds to the second row of the state TEST1 in the table. Because of the result of this 
test the state SHORT is assumed as the next state. In this case the switch S2 remains in the 
"on" position and the short-circuited trunk cable H2 is disconnected from the cable segment 
lying in front of it, die trunk cable HI. The connection via the high-impedance resistor R0 can 
in this case be ignored. Simultaneously the line end produced in this way is terminated by 
switching over the switch SO to the position "on" via the termination element BT with the 
correct surge resistance. 

[00042] In accordance with first row of the state TEST2 there is a transition from this 
state into the state OK if the voltage ratio K lies between 1/10 and 2/5. In the state OK the 
switches SO, SI, S2 are in the "off' position and both trunk cables HI and H2 connected to the 
branching unit Tl are in order. Further distinctions between cases and state transitions which 
are produced by the various measurements of the voltages Ul and U2 by the control unit ST 
can be seen from the state diagram in Figure 6. 

2003P17943WOUS Substitute Specification marked SOL.rtf 

11 



200317943 



[00043] In the example explained above the feed voltage was fed to the branching unit 
Tl via the trunk cable HI. If this voltage is fed alternately via the trunk cable H2 the 
associated state table can be simply obtained by swapping over the indices for the voltages Ul 
and U2. 

[00044] The states SHORT (trunk cable H2 short circuited) and OPEN (trunk cable H2 
open circuited) are error states which lead to the injection of the feed voltage by the 
redundancy manager RM via both ports Bl and B2. If the error concerned is rectified the 
branching unit Tl involved is initially switched to the state IDLE. Since the switch SO is in 
the "off position and in this case, the linear network 1 1 fed from both sides has no line 
termination. This leads to an increase in the signal amplitude which is detected by the second 
control unit RMCB of the redundancy manager RM and which causes the latter to open the 
switch RMS 3 and thus cancel the power feed at the port B2 again. As a result of the now 
error-free Network 1 1 the actual operating state OK is reached via the state TEST1 . 

[00045] In the exemplary embodiment described the determination of the state of the 
cable segment to be monitored uses the ratio between output and input voltage of the 
branching unit. Instead this state can also for example be determined from the absolute values 
of the voltages and the currents. 

[00046] The capacitor C shown in Figure 4 is used to ensure an int erruptible power 
supply for the user device Fl connected to the branching unit Tl even in the period caused by 
switching delays between the occurrence of an error and the establishment of the alternate 
energy supply. To this end the capacitor C is charged with the feed voltage in the operating 
phase if at least one of the switches SI, S2 is in the "off' position via a decoupling diode Dl 
and a charge resistor R3. The control unit ST monitors the voltage U3 present on the drop 
cable SKI to the user device Fl and switches the capacitor C via the switch S3 to the drop 
cable SKI if it detects a voltage U3 which is too low. The decoupling diode Dl and a further 
decoupling diode D2 prevent a flow back of energy into the network 1 1 . 

[00047] A RESET of the system can be initiated manually automatically by the 
redundancy manager RM and briefly switching off the feed voltage to the ports Bl and B2, 
after which via the IDLE state a new test cycle is initiated, running through the TEST' and 
TEST2 states. 
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[00048] The embodiment of a network described has the advantages that the branching 
units can draw their comparatively low operating energy from the trunk cable, the control 
units ST of the branching units operate independently and the signal path can be embodied as 
a passive path since there are only resistors and switches between the network connections of 
the branching units. An active solution, for example with a signal refresh as with repeaters is 
however also possible. 

[00049] In Figure 6 the states and state transitions of the table from F igure 5 are shown 
once again for a better overview in the form of a state diagram which describes the same 
behavior of the control unit ST as the table. The following applies to all states: For Ul < U0 a 
RESET is performed by the redundancy manager RM and the sequence begins with the IDLE 
state. 

[00050] For the exemplary embodiment described above a short circuit in the drop 
cable SKI is not dealt with. It are can however be expanded in a simple manner so that all 
cables connected to a branching unit can be monitored. Figure 7 shows a basic circuit diagram 
of a branching unit T5 expanded in this way which by comparison with the branching unit Tl 
explained with reference to Figure 4 has been expanded by a switch S4 and resistors R4, R5 
and R6. The principle of monitoring three cables is similar to die monitoring of two cables 
described above and can thus be understood per se by person skilled and the art with reference 
to Figure 7. 

[00051] In the exemplary embodiment described the branching units are set up 
separately from the field devices and merely connected to the latter via a drop cable in each 
case. As an alternative to this a branching unit can be integrated into the housing of the field 
device concerned. 

[00052] Alternatively to the branching unit shown in Figure 4 with a drop cable 
connection it is possible to embody the unit without a drop cable connection or not connect a 
drop cable. This makes it possible to divide the network line up into predetermined line 
segments which can be monitored individually. Errors can be localized and rectified more 
simply in this way. 

[00053] A further alternative is to equip the branching units with a number of drop 
cable connections for field devices. 
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[00054] If the error is to be repaired after the error location has been determined, 
unstable states for example in the form of intermittent contacts can occur by which operation 
of the system will be adversely affected. To avoid this provision can be made for fixing the 
states at the network connections of the branching unit which can for example be done by a 
short circuit connectors which are then removed again after repair. This state fixing can also 
be used with the corresponding layout for explicitly deactivating individual cable segments 
and thus makes maintenance work easier in an explosion -hazard area. In this case there is the 
option of mechanically covering the terminals of the network connections which may not be 
worked on, with the coverings being designed so that when they are removed both the short 
circuit mentioned above the occurence of sparks which are capable of ignition arising is 
prevented. 



2003P17943WOUS Substitute Specification marked SOL.rtf 

14 



200317943 
Claims 

1.-17. (cancelled) 

18. (new) A network having redundancy properties, comprising: 
a redundancy manager; 

at least one branching unit for connecting a user device to th e network; and 

a line having two line ends, the two line ends connected to the redundancy manager, 
the redundancy manager configured to: 

disconnect the two line ends from each other in an error -free state of the line; 

connect the two line ends in an error state of the line; and 

feed a supply voltage into one of the two line ends for supplying a user device 
connected to the network via the branching unit, wherein 

the branching unit is arranged in the network line such that a first cable having a first 
cable end of the network line is connected to a first network connection of the branching unit 
and a second cable having a second cable end of the network line is connected to a second 
network connection of the branching unit, 

the branching unit is configured to: 

check a state of the first cable if the supply voltage is received at the second network 
connection and to check a state of the second cable if the supply voltage is received at the first 
network connection; and 

forward the supply voltage to the first respectively second cable only if the first 
respectively second cable has an error -free state, and 

the redundancy manager is configured to: 

feed a further supply voltage to the first line end if the supply voltage is fed to the 
second line end and is not detected at the first line end after lapse of a predetermined period of 
time by the redundancy manager; and 

feed the further supply voltage to the second line end if the supply voltage is fed to the 
first line end and is not detected at the second line end af ter lapse of the predetermined period 
of time by the redundancy manager. 

19. (new) The network in accordance with claim 18, wherein the network is a 
PROFIBUS PA network. 
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20. (new) The network in accordance with claim 1 8, wherein the redundancy manager 
and the branching unit each include a termination element configured to be connected to the 
first or second line end if the redundancy manager or the branching unit are arranged at the 
first respectively second line end. 

21 . (new) The network in accordance with claim 1 8, wherein the branching unit 
comprises two switches and a control unit, the two switches configured to be actuated by the 
control unit such that a user device connected to the branching unit can be selectively 
connected to the first or to the second network connection or to both the first and second 
network connections for maintaining power supply to the user device and for maintaining data 
transmission from the user device to the network. 

22. (new) The network in accordance with claim 2 1 a wherein 

the branching unit comprises a resistor network including the two switches, and 
the switches are configured to be actuated by the control unit such that a current or a 

voltage related to the first or second cable connected to the first respectively second network 

connection can be checked by the control unit. 

23. (new) The network in accordance with claim 18, wherein the branching unit 
comprises an energy accumulator configured to be charged by the supply voltage at least in 
the error-free state, and the branching unit is configured to measure a voltage present at the 
user device connected to the network via the branching unit and to connect the energy 
accumulator to the user device if the measured voltage corresponds to a voltage deficit. 

24. (new) The network in accordance with claim 18, comprising a plurality of 
branching units, wherein the redundancy manager includes a recording unit for recording the 
timely behaviour of a voltage or a current related to the supply voltage at the first or second 
line end during forwarding of the supply voltage by any of the branching units and for 
determining the number of branching units fed by the supply voltage up to a physical error 
location. 
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25. (new) The network in accordance with claim 1 8, wherein the redundancy manager 
includes a further recording unit for recording changes of a voltage or a related to the supply 
voltage at the first or second line end and for determining a state transition of the network . 

26. (new) A branching unit for connecting a user device to a network having 
redundancy properties, the network comprising a line having two line ends connected to a 
redundancy manager of the network, the redundancy manager configured to disconnect the 
two line ends from each other in an error -free state of the line and to connect the two line ends 
to each other in an error state of the line, the branching unit comprising first and second 
network connections for connecting first respectively second cable ends of the line to the 
branching unit, wherein the branching unit is configured to: 

be arranged in the line by connecting the first and second cable ends to the first 
respectively second network connections; 

check a state of a first cable connected to the first network connection via the first 
cable end if a supply voltage is received at the second network connection; 

check a state of a second cable connected to the second network connection via the 
second cable end if the supply voltage is received at the first network connection; and 

forward the supply voltage to the first respectively second cable only if the first 
respectively second cable has an error-free state. 

27. (new) The Branching unit in accordance with claim 26, further comprising two 
switches and a control unit, the two switches configured to be actuated by the control unit 
such that a user device connected to the branching unit can be selectively connected to the 
first or to the second network connection or to both the first and second networ k connections 
for maintaining power supply to the user device and for maintaining data transmission from 
the user device to the network. 

28. (new) The branching unit in accordance with claim 27, further comprising a 
resistor network including the two switches, wherein the switches are configured to be 
actuated by the control unit such that a current or a voltage related to the first or second cable 
connected to the first respectively second network connection can be checked by the control 
unit. 
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29. (new) The branching unit in accordance with claim 26, further comprising an 
energy accumulator configured to be charged by the supply voltage at least in the error -free 
state, wherein the branching unit is configured to measure a voltage present at the user devi ce 
connected to the network via the branching unit and to connect the energy accumulator to the 
user device if the measured voltage corresponds to a voltage deficit. 

30. (new) The branching unit in accordance with claim 26, wherein the first and 
second network connections are configured to be fixed in a predetermined electrical state for 
performing maintenance or repair work. 

3 1 . (new) A redundancy manager for a network having redundancy properties, the 
network having a line including first and second line ends, the first and second line ends 
connected to the redundancy manager, the redundancy manager configured to: 

disconnect the first and second line ends from each other in an error -free state of the 

line; 

connect the first and second line ends in an error state of the line; 

feed a supply voltage into the first or second line end for supplying a user device 
connected to the network via a branching unit; 

feed a further supply voltage to the first line end if the supply voltage is fed to the 
second line end and is not detected at the first line end after lapse of a predetermined period of 
time by the redundancy manager; and 

feed the further supply voltage to the second line end if the supply voltage is fed to the 
first line end and is not detected at the second line end after lapse of the predetermined period 
of time by the redundancy manager. 

32. (new) The redundancy manager in accordance with claim 31, further comprising a 
plurality of branching units and a recording unit for recording the timely behaviour of a 
voltage or a current related to the supply voltage at the first or second line end during 
forwarding of the supply voltage by any of the branching units and for determining the 
number of branching units fed by the supply voltage up to a physical error location. 

33. (new) The redundancy manager in accordance with claim 31, further comprising a 
communication interface for connecting the redundancy manager to a higher -ranking network 
and for exchanging data with the higher-ranking network. 
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34. (new) The redundancy manager in accordance with claim 33, farther comprising at 
least two segment couplers for connecting the redundancy manager to at least two 
communication channels of the higher-ranking network, the higher-ranking network 
embodied as a redundant network, wherein the redundancy manager is configured to: 

monitor a functionality of the at least two segment couplers ; and 
select one of the segment couplers for connecting the redundancy manager to the 
network having redundancy properties, 

35. (new) A method of operating a network having redundancy properties, the network 
comprising a line having first and second line ends connected to a redundancy manager, the 
method comprising: 

disconnecting the first and second line ends from each other in an error -free state of 
the line; 

connecting the first and second line ends in an error state of the line; 

feed a supply voltage into the first or second line end for supplying a user device 
connected to the network via a branching unit; 

feed a further supply voltage to the first line end if the supply voltage is fed to the 
second line end and is not detected at the first line end after lapse of a predetermined period of 
time by the redundancy manager; and 

feed the further supply voltage to the second line end if the supply voltage is fed to the 
first line end and is not detected at the second line end after lapse of the predetermined period 
of time by the redundancy manager. 
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The invention relates to a network, in particular a PA PROFIBUS network having 
redundant properties and a linear topology. Two line ends are connected to a redundancy 
manager which disconnects said line ends in error -free conditions and connects them in error 
conditions. Said redundancy manager supplies voltage to the first line end for operating 
customers' mobile telephones each of which is connected to the network by a branching unit. 
After receiving a supply voltage on one connection thereof, said branching units check the 
state of a cable which is connected to the other network connection and transmit the supp ly 
voltage in the faultless condition thereof only. When the redundancy manager does not detect 
the supply voltage on the other end of the line end at least during a predetermined space of 
time after voltage supply, said redundancy manager supplies the voltage thereto. A cable 
having a disturbance is then disconnected from the line by the adjacent branching units. 
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